AWS Certified CloudOps Engineer - Associate SOA-C03

By Amazon · Question Mode

QuestionQ13

Security and Compliance

A company operating multiple workloads on AWS wants to improve its security posture by implementing DNS-based threat protection. The company needs to block DNS-based attacks.

Which solution meets this requirement?

Explanation

Amazon Route 53 Resolver DNS Firewall Advanced detects DNS threats, including DNS tunneling and domain-generation-algorithm (DGA) activity, and can apply a block action to matching DNS queries. It operates with Route 53 Resolver to filter outbound DNS queries from VPC workloads.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!